HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTCREDENTIALSMediumResolved
National Advisors Holdings, Inc.
bd_8bb50356ed20fe23 · schema v1 · pii pii-v1
Full breach record for National Advisors Holdings, Inc. →National Advisors Holdings (NAH/National Advisors Trust) reported an external breach on April 17, 2023, in which an unauthorized individual accessed four employee email accounts containing client data. Discovered January 18, 2024. Exposed data: names, SSNs, driver's license/state ID numbers. 47 Maine residents affected (14,160 total). Supplemental wave-2 notice issued August 9, 2024 due to vendor notification error. Credit monitoring offered via Epiq.
Maine clockDiscovered Jan 18, 2024 → Filed with AG Aug 13, 2024208d ✗ ME AG >90d30 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_e7d178d353d24dfdVermont State AGfiled 2024-08-14(1d gap)Verified
- bd_2aff28697cf02eb2New Hampshire State AGfiled 2024-08-12(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/69d0343c-9880-45bb-b205-33017d47d8ed.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 13, 2024
- Raw hash
- cf24ef916dbda49d725a375eb7e51f1d7f3b460aabcf9847f6f2f8f4d411e59d
Reporting entity
- Name
- National Advisors Holdings, Inc.norm: national advisors
- Industry
- Financial Services
Victim entity
- Name
- National Advisors Holdings, Inc.norm: national advisors
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jan 18, 2024
- Materiality determined
- —
- Notification sent
- Feb 2, 2024
- Affected individuals
- 47
- Data types
- PIIIDENTITY_GOVERNMENTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine Attorney General Security Breach Notification
Compliance
- Time to disclose
- 30 weeks(208 days from discovery to filing)
- Compliance flags
- ME AG >90d · 208d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 18, 2024→ Filed with AG: Aug 13, 2024208d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.